IT Compliance, Automation Analyst

• Develop, maintain, and continuously improve controls across SOX ITGC/ITAC, SOC 1, SOC 2, and ISO 27001
• Provide compliance guidance and best practices to IT and business teams
• Lead IT control testing and audit coordination with internal audit, external auditors, and third-party assessors
• Conduct risk assessments, identify control gaps and compliance issues, and drive remediation with process and control owners
• Redesign manual compliance processes such as access reviews, evidence collection, and control monitoring using scripting, workflow tools, and AI-assisted technologies
• Build and maintain a compliance automation roadmap, measure efficiency gains, and report progress to management
• Improve audit evidence collection and PBC processes
• Develop understanding of Ibotta's IT infrastructure, applications, and systems to identify risks and improvement opportunities
• Monitor regulatory requirements and emerging automation/AI technologies
• Provide guidance and training to stakeholders
• Uphold Ibotta's Core Values
• Securely handle data, identify and report phishing attempts, and report security incidents

• 4+ years of IT regulatory compliance experience, including at least 2 years working directly with SOX ITGC and ITAC
• Bachelor's degree in IT, Information Systems, or a related field, or equivalent practical experience required
• Working knowledge of SOC 1, SOC 2, and ISO 27001
• Proficient in technical auditing
• Experience translating controls and compliance requirements for technical stakeholders
• Experience identifying process inefficiencies and implementing automation through scripting, workflow/RPA tools, GRC platforms, AI-based tools, or similar technologies
• Sound judgment around applying AI to compliance workflows while maintaining audit-quality standards
• Experience documenting internal control processes through narratives, flowcharts, or similar documentation
• Analytical, problem-solving, communication, and collaboration skills
• Ability to work independently and manage competing priorities
• Knowledge of IT systems and cloud environments such as AWS
• Applicants must be currently authorized to work in the United States on a full-time basis
• CISA or similar professional certification preferred; SOC 2 or ISO 27001 certifications/coursework are a plus

Demonstrates expertise in IT regulatory compliance, particularly with SOX ITGC, ITAC, SOC 1, SOC 2, and ISO 27001. Proficient in technical auditing, risk assessment, and automation of compliance processes using advanced technologies.

• SOX ITGC Compliance
• SOC 1 Knowledge
• SOC 2 Knowledge
• ISO 27001 Familiarity
• Technical Auditing

• IT Regulatory Compliance
• Risk Assessment
• Control Testing
• Process Automation
• Control Documentation
• Data Security
• Phishing Identification
• Cloud Environments
• Scripting
• Workflow Tools

• Analytical Skills
• Problem-Solving
• Communication
• Collaboration
• Judgment

• CISA
• SOC 2 Certification
• ISO 27001 Certification

• ITGC
• ITAC
• Compliance Guidance
• Audit Coordination
• Control Gaps
• Regulatory Requirements
• Emerging Technologies
• Access Reviews
• Evidence Collection
• Control Monitoring

• GRC Platforms
• AI-Based Tools
• Workflow/RPA Tools
• Audit Evidence Collection Tools
• Compliance Automation Tools